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Top Stories 

• A multi- vehicle collision on eastbound Interstate 40 in North Little Rock, Arkansas, left 10 
people injured out of the 115 individuals involved in the accident and closed the roadway 
for nearly 2 hours September 4. - Arkansas Democrat-Gazette (See item 9) 

• San Diego officials reported September 4 that 1.6 million gallons of water was released 
after an 18-inch main broke September 3 flooding residences and garages, and forcing 
crews to shut off water service for more than 12 hours. - U-T San Diego (See item 14 ) 

• U.S. authorities arrested a former supervising pharmacist from the New England 
Compounding Center of Framingham, Massachusetts, September 4 that is linked to a 2012 
meningitis outbreak that killed 64 people across the U.S and sickened 700 others. - Reuters 
(See item 15 ) 

• Federal authorities announced September 4 that hackers were able to successfully install 
malicious software on Healthcare.gov that could have been used to launch an attack on 
other sites from the federal insurance portal in July. - Associated Press (See item 16 ) 
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Energy Sector 



1 . September 5, WBAY 2 Green Bay - (Wisconsin) Complete power restoration 
‘unlikely’ today. Wisconsin Public Service crews worked to restore service September 
5 to the 18,000 customers in the area that remained without power after 50,000 
customers lost service due to strong storms that moved through the State September 4. 
Source: http://www.wbav.eom/storv/26449433/2014/09/04/update-6-power-outages- 
fall-below-30000-wps-expects-power-restored-saturday 

2. September 4, Associated Press - (Massachusetts) Court reduces fines against utilities 
for storms. The Supreme Judicial Court in Massachusetts reduced penalties September 
4 imposed against National Grid to $17.8 million and NStar to $2 million after an 
investigation determined that the State Department of Public Utilities (DPU) did not 
prove the utilities’ responses were too slow. The State DPU initially fined the two 
utilities for their roles in responses to the outages caused by Tropical Storm Irene in 
August 2011. 

Source: http://www.timesunion.com/news/article/Court-reduces-fines-against-utilities- 
for-storms-5733349.php 

3. September 4, U.S. Environmental Protection Agency - (New York) Owners of 
Buffalo-area gas stations ordered to pay $290,000 in penalties. The U.S. 
Environmental Protection Agency ordered Amerimart Development Company, Qual- 
Econ Eease Co., Inc., MIG Enterprises, Inc., and Clear Alternative of Western NY, 

Inc., to pay a total of $287,100 September 4 in penalties for allegedly violating several 
federal regulations aimed at protecting water from petroleum contamination. The 
Buffalo, New York- area gas station owners and operators must also bring the stations 
into compliance with federal law. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/07615B018CAA8C6785257D49005E4718 
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Chemical Industry Sector 

See item 26 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. September 4, U.S. Department of Labor - (Oklahoma) OSHA cites Pride Plating Inc. 
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with 38 violations for exposing workers to a cancer-causing health hazard; fines 
total $341,550. The Occupational Safety and Health Administration cited Pride Plating 
Inc., September 4 for 38 health and safety violations, including 9 repeat violations, for 
exposing workers to hexavalent chromium at its Grove, Oklahoma facility. Proposed 
fines totaled $341,550. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26628 

5. September 4, U.S. Department of Labor - (Wisconsin) Liquid chlorine handling 
procedures cited at Racine, Wisconsin, foundry. Beck Aluminum Alloys Ltd., was 
cited September 4 by the Occupational Safety and Health Administration for 10 serious 
safety violations at its Racine facility for inadequate liquid chlorine handling 
procedures. Proposed fines totaled $32,890. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26625 

Eor another story, see item 19 
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Defense Industrial Base Sector 

See item 19 
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Financial Services Sector 

6. September 5, Wired.com - (International) Bitcoin exchange CEO pleads guilty to 
enabling Silk Road drug deals. The former CEO of Bitcoin exchange Bitinstant and a 
Bitcoin seller pleaded guilty September 4 in New York City to charges of operating an 
unlicensed money exchange that was used to facilitate illicit transactions for users of 
the Silk Road underweb marketplace. 

Source: http://www.wired.com/2014/09/bitcoin-exchange-ceo-pleads-guilty-in-silk- 
road-case/ 



Eor another story, see item 28 
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Transportation Systems Sector 

7. September 5, CBS News - (Virginia) United Airlines flight diverted over child 
custody battle. A United Airlines flight from Virginia’s Dulles International Airport 
headed for Beijing, China, was forced to return to Virginia 5 hours after takeoff 
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September 4 due to a child custody investigation that involved a parent and child 
onboard. The FBI arrested the parent upon returning to Dulles International Airport on 
alleged kidnapping charges. 

Source: http://www.cbsnews.com/news/united-airlines-flight-diverted-over-child- 
custody-battle/ 

8. September 5, WBAL 11 Baltimore - (Maryland) Water main break closes part of 
Route 1 in White Marsh. A water main break shut down all lanes of Route 1 in White 
Marsh for 2 hours September 5. Crews reopened one lane of southbound Belair Road 
while they worked to fix the break. 

Source: http://www.wbaltv.com/news/water-main-break-closes-part-of-route-l-in- 
white-marsh/27 894792 

9. September 4, Arkansas Democrat-Gazette - (Arkansas) Multi- vehicle wreck involving 
NLRHS school buses injures 10, slows 1-40 traffic. A multi-vehicle collision 
involving 2 school buses and 5 other vehicles on eastbound Interstate 40 in North Little 
Rock left 10 people injured of the 115 individuals involved in the accident and closed 
the roadway for nearly 2 hours while crews work to clear the scene September 4. 
Source: http://www.arkansasonline.eom/news/2014/sep/04/traffic-alert-i-40- wreck- 
involving-school-bus-slow/ 

10. September 4, United Press International - (Florida) Freight train derails in Florida, 
delays passengers. Two locomotives and one rail car from a CSX freight train derailed 
in Sanford September 4, causing delays for passengers on SunRail commuter trains. 

The cause of the derailment is under investigation. 

Source: http://www.upi.com/Top News/US/2014/09/04/Freight-train-derails-in- 
Florida-delays-passengers/841 140984485 1 

For another story, see item 24 
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Food and Agriculture Sector 

11. September 5, Orange County Register - (California) Bacteria sickens at least six at 
Newport Beach restaurant. Newport Beach health officials are investigating after six 
patrons of True Food Kitchen in Fashion Island tested positive for shigella after eating 
at the restaurant August 21, 23, 24, or 25. The restaurant was ordered closed August 28 
and reopened August 30 after it underwent a deep-cleaning, including the disposal of 
food and beverages, and the hiring of a temporary, replacement staff. 

Source: http://www.ocregister.com/articles/food-633877-restaurant-true.html 

12. September 4, KETV 7 Omaha - (Nebraska) 2 hurt in accident at Omaha plant. Two 
employees of a Kellogg’s plant in Omaha were injured September 4 when a piece of 
equipment fell on them while they were working on a hopper for a hydraulic trash 
compactors. 

Source: http://www.ketv.com/news/2-hurt-in-accident-at-omaha-plant/27882394 
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13. September 3, U.S. Food and Drug Administration - (Washington) Tullia’s recalls 
sauce because of possible health risk. The U.S. Food and Drug Administration 
announced September 3 that Tullia’s issued a recall for some 16- and 32-ounce 
containers of its Italian Meatless Pasta Sauce due to elevated pH levels that could allow 
the growth of Clostridium botulinum. The issue was detected during a review of 
records by the Washington State Department of Agriculture. 

Source: http://www.fda.gov/Safetv/Recalls/ucm4128Q4.htm 
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Water and Wastewater Systems Sector 

14. September 4, U-T San Diego - (California) 1.6M gallons of water lost in main break. 
San Diego officials reported September 4 that 1.6 million gallons of water was released 
after an 18-inch main broke in the Kearny Mesa community September 3 flooding 
residences and garages, and forcing crews to shut off water service for more than 12 
hours. 

Source: http ://www .utsandiego .com/news/20 1 4/sep/04/water-main-fIood-birdland- 
meadow-lark/ 
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Healthcare and Public Health Sector 

15. September 5, Reuters - (Massachusetts) Man tied to deadly 2012 meningitis 
outbreak arrested. U.S. authorities arrested a former supervising pharmacist from the 
New England Compounding Center of Framingham, Massachusetts, September 4 as he 
was boarding a flight from Boston Logon International Airport. The former pharmacist 
is linked to a 2012 meningitis outbreak that killed 64 people across the U.S and 
sickened 700 others due to tainted steroids which caused the closure of the center. 
Source: http://news.msn.com/crime-iustice/man-tied-to-deadlv-201 2-meningitis- 
outbreak- arrested 

16. September 4, Associated Press - (International) Hackers break into Healthcare.gov. 
The U.S. Department of Health and Human Services announced September 4 that 
hackers were able to successfully install malicious software on Healthcare.gov that 
could have been used to launch an attack on other sites from the federal insurance 
portal in July. The intrusion was detected August 25 and mitigated after technicians 
determined that no consumer data was taken. 

Source: http://abcnews.go.com/Health/wireStorv/hackers-break-healthcare-25252518 
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Government Facilities Sector 

17. September 4, Orlando Sentinel - (Florida) Power outages at Lake high school 
prompt most students to leave early. A power outage prompted the evacuation of 
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students and staff from South Lake High School in Groveland for more than 2 hours 
September 4 due to an issue with the utility company. 

Source: http://www.orlandosentinel.com/news/os-lk-south-lake-high-power-outage- 
20140904,0.375 1732.storv 



18. September 4, KMBC 4 Kansas City - (Missouri) UMKC Health Sciences building 
evacuated after gas line hit. A gas leak prompted the evacuation of 200 students from 
the Health Sciences building at the University of Missouri-Kansas City September 4 
after an 8-inch main was compromised. Officials closed the building while utility crews 
monitored gas readings and checked other buildings. 

Source: http://www.kmbc.com/news/umkc-health-sciences-building-evacuated-after- 
gas-line-hit/27878894 

For another story, see item 20 
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Emergency Services Sector 

Nothing to report 



[ Return to top ] 

Information Technology Sector 

19. September 5, IDG News Service - (International) Cyberespionage group starts using 
new Mac OS X backdoor program. FireEye researchers found that a cyberespionage 
group dubbed GREF has recently begun using a backdoor program known as XSECmd 
that targets Mac OS X systems in order to steal files and install additional malware. The 
GREF group is known for attacks on several sectors including the U.S. defense industry 
as well as electronics manufacturers, engineering firms, and non-govemmental 
organizations worldwide. 

Source: http://www.networkworld.com/article/2603441/cvberespionage-group-starts- 
using-new-mac-os-x-backdoor-program.html 

20. September 5, Help Net Security - (International) Coursera privacy issues exposed. A 
researcher identified and reported two issues in the Coursera online educational 
software that could disclose a list of students’ names, email addresses, information on 
their courses, and disable a stated protection feature. Coursera partially addressed one 
of the reported issues while the second remains unaddressed. 

Source: http://www.net-securitv.org/secworld. php?id=17334 

21. September 4, SC Magazine - (International) Researchers discover two SQL injection 
flaws in WordPress security plugin. Researchers with High-Tech Bridge identified 
and reported two SQE injection vulnerabilities in the All in One WordPress Security 
and Firewall plugin that affects version 3.8.2 and likely all prior versions. 
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Source: http://www.scmagazine.com/researchers-discover-two-sql-iniection-fIaws-in- 
wordpress-securitv-plugin/article/369851/ 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: httD://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

22. September 4, Powell Tribune - (Wyoming) Severed cable knocked out area phones, 
Internet. Century Link phone and Internet service and AT&T eellular service was 
down for more than 5 hours September 4 for eustomers in Powell and Cody in 
Wyoming due to a severed fiber optic cable. 

Source: http://www.powelltribune.com/news/item/12821-severed-cable-knocked-out- 
area-phones 

23. September 3, Washington Post - (National) Verizon failed to tell 2 million using their 
personal info for marketing. Now the FCC is making it pay. The U S. Federal 
Communications Commission issued a $7.4 million fine against Verizon after the 
company failed to tell 2 million customers of their ability to opt out of having their 
personal information used for marketing purposes for 6 years. Verizon agreed to pay 
the fine and stated that the technical glitch has since been fixed. 

Souree: http://www.washingtonpost.eom/blogs/the-switch/wp/2014/09/03/verizon- 

failed-to-tell-2-million-people-it-was-using-their-personal-info-for-marketing-now-the- 

fcc-is-making-it-pay/ 
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Commercial Facilities Sector 

24. September 5, Will 6 Milwaukee - (Wisconsin) Fire destroys Elkhorn restaurant, 
temporarily shuts down U.S. 12. Authorities are investigating the cause of a fire that 
broke out September 5 inside Abell’s Restaurant and Lounge in Elkhorn and caused an 
estimated $1 million in damage. A portion of U.S. Highway 12 was temporarily elosed 
in both direetions in Walworth County while firefighters battled the blaze. 

Source: http://fox6now.eom/2014/09/05/fire-destrovs-elkhorn-restaurant-closes- 
highway- 12-at-county-es/ 

25. September 5, Charlotte Observer - (North Carolina) 3 men charged with 14 break-ins 
to phone and gaming stores. Police arrested three men in connection to 14 incidents 
of breaking and entering into phone and gaming stores in Charlotte, Pineville, and 
Concord since August. 
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Source: http://www.charlotteobserver.eom/2014/09/05/5151698/3-men-charged-with- 
14-break-ins.html 



26. September 4, KMA 960 AM Shenandoah - (Missouri) Rock Port chemical spill 
update. Businesses along the Highway 136-Interstate 29 corridor in Rock Port, 
Missouri, were evacuated for about 3 hours while crews cleaned Nox-Crete 
Deactivator, an equipment maintenance coating and cleaning compound, that spilled 
from a semi-truck onto the ground behind a truck stop September 3. 

Source: http://www.kmaland.com/news/rock-port-chemical-spill- 
update/article eld93d66-3468-l Ie4-85c3-0017a43b2370.html 

27. September 4, KPIX 5 San Francisco - (California) Firefighter, 2 others hurt in 
massive San Francisco Mission District store fire, building in danger of collapse. A 
5-alarm fire tore through the Big House Inc. store located in the Mission District area 
of San Francisco September 4, injuring 3 people. Adjacent buildings were evacuated, 
and the structure was deemed a total loss that was at risk of collapse and would need to 
be demolished. 

Source: http://sanfrancisco.cbslocal.eom/2014/09/04/huge-fire-san-francisco-mission- 
district-torches-retail-store/ 



28. September 4, Softpedia - (International) Bartell Hotels payment systems 
compromised. Bartell Hotels officials confirmed September 4 that the payment 
systems of 5 California hotels were compromised between February 16 and May 13. 
The company is working with authorities to determine the extent of the breach and 
stated that the glitch was eliminated. 

Source: http://news.softpedia.com/news/Bartell-Hotels-Payment-Svstems- 
Compromised-457691.shtml 
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Dams Sector 

Nothing to report 
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NTAS 
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NO ACTIVE ALERTS 
\v\v vv.DHS.gov /alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://w'W'vv'. dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support® govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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